gmail-opportunity-progress
Pass
Audited by Gen Agent Trust Hub on May 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill facilitates legitimate synchronization between the user's Gmail and Notion accounts via authorized API tools.
- [PROMPT_INJECTION]: The skill processes untrusted external data from Gmail messages, creating a surface for indirect prompt injection. 1. Ingestion points: Gmail message subjects, bodies, and sender domains retrieved via API tools (SKILL.md). 2. Boundary markers: The instructions do not specify delimiters or markers to isolate email content from the agent's instructions. 3. Capability inventory: The skill can search and read Gmail threads and update Notion database rows, including status and notes (SKILL.md). 4. Sanitization: Mitigation is provided by the skill's logic, which maps messages to a fixed list of statuses and summarizes content into progress notes rather than executing text as instructions.
Audit Metadata